Express Invoice@7.25 Security Vulnerabilities and Issues — Express Invoice@7.25 CVE List

Lucene search

NchsoftwareExpress Invoice7.25

2 matches found

CVE•added 2020/04/07 4:15 p.m.•32 views

CVE-2020-11561

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen.

8.8CVSS8.3AI score0.00364EPSS

CVE•added 2020/04/07 5:15 p.m.•29 views

CVE-2020-11560

NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file.

7.8CVSS7.5AI score0.02474EPSS